Granted Patent B2

US 12,739,631 · App. 18/910,183 · Granted Sep 15, 2026

Inventors: Mahesh Babu Ramaiah (Bangalore, IN); Mukesh Gupta (Shrewsbury, MA); Yuvakrishnan Sadhasivam (Bengaluru, IN)

Assignee: Dell Products L.P.

H04W12/06H04W12/102

Abstract

Claims (46)

1 . An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;

the at least one processing device being configured to implement a control plane configured for onboarding of an endpoint computing device that is to be deployed at a first computing site:

to obtain a data structure, the obtained data structure comprising information utilizable for generating a temporary wireless credential for the endpoint computing device that is to be deployed at the first computing site, the temporary wireless credential being provisioned in the endpoint computing device at a second computing site different than the first computing site;

to generate, based at least in part on the obtained data structure, the temporary wireless credential for the endpoint computing device;

to provision the temporary wireless credential in a wireless network device at the first computing site;

to verify a wireless connection between the endpoint computing device and the wireless network device at the first computing site, the wireless connection utilizing the temporary wireless credential;

responsive to successfully verifying the wireless connection of the endpoint computing device to the wireless network device at the first computing site utilizing the temporary wireless credential, to provision an updated wireless credential in the endpoint computing device and the wireless network device, the updated wireless credential being specified by an operator of the first computing site;

to receive, from the endpoint computing device, a payload comprising the updated wireless credential signed using a private key of a key pair associated with the endpoint computing device;

to verify the payload received from the endpoint computing device utilizing a public key of the key pair associated with the endpoint computing device; and

responsive to successfully verifying the payload received from the endpoint computing device, to instruct the endpoint computing device to remove the temporary wireless credential provisioned in the endpoint computing device.

2 . The apparatus of claim 1 wherein the first computing site comprises an edge computing site, and the endpoint computing device comprises an edge computing device.

3 . The apparatus of claim 1 wherein the second computing site is operated by a vendor of the endpoint computing device, the vendor of the endpoint computing device being different than the operator of the first computing site.

4 . The apparatus of claim 1 wherein the wireless network device at the first computing site comprises a wireless router.

5 . The apparatus of claim 1 wherein the obtained data structure comprises an ownership voucher associated with the endpoint computing device, the ownership voucher identifying an algorithm for generating the temporary wireless credential for the endpoint computing device.

6 . The apparatus of claim 5 wherein the ownership voucher further identifies the wireless network device at the first computing site.

7 . The apparatus of claim 5 wherein the at least one processing device is further configured to obtain, from an external server operated by a vendor of the endpoint computing device, at least a portion of the algorithm for generating the temporary wireless credential for the endpoint computing device.

8 . The apparatus of claim 1 wherein the control plane is part of a data center external to the first computing site.

9 . The apparatus of claim 1 wherein the obtained data structure comprises an ownership voucher associated with the endpoint computing device, the ownership voucher comprising first key information associated with the control plane, second key information associated with an operator of the first computing site and third key information associated with a vendor of the endpoint computing device.

10 . The apparatus of claim 9 wherein the control plane comprises a first cryptographic certificate associated with the control plane, a second cryptographic certificate associated with the operator of the first computing site, and a third cryptographic certificate associated with the vendor of the endpoint computing device, the control plane being configured to utilize the first, second and third cryptographic certificate to verify the first, second and third key information in the ownership voucher.

11 . The apparatus of claim 10 wherein provisioning the temporary wireless credential in the wireless network device at the first computing site is responsive to a successful verification by the control plane of the first, second and third key information in the ownership voucher.

12 . The apparatus of claim 1 wherein the control plane is configured for communication with the wireless network device at the first computing site via a rendezvous server external to the first computing site and the control plane.

13 . The apparatus of claim 12 wherein the control plane is configured to utilize the rendezvous server for configuring the wireless network device at the first computing site with a device provisioning protocol.

14 . A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device implementing a control plane configured for onboarding of an endpoint computing device that is to be deployed at a first computing site causes the at least one processing device:

to obtain a data structure, the obtained data structure comprising information utilizable for generating a temporary wireless credential for the endpoint computing device that is to be deployed at the first computing site, the temporary wireless credential being provisioned in the endpoint computing device at a second computing site different than the first computing site;

to generate, based at least in part on the obtained data structure, the temporary wireless credential for the endpoint computing device;

to provision the temporary wireless credential in a wireless network device at the first computing site;

to verify a wireless connection between the endpoint computing device and the wireless network device at the first computing site, the wireless connection utilizing the temporary wireless credential;

responsive to successfully verifying the wireless connection of the endpoint computing device to the wireless network device at the first computing site utilizing the temporary wireless credential, to provision an updated wireless credential in the endpoint computing device and the wireless network device, the updated wireless credential being specified by an operator of the first computing site;

to receive, from the endpoint computing device, a payload comprising the updated wireless credential signed using a private key of a key pair associated with the endpoint computing device;

to verify the payload received from the endpoint computing device utilizing a public key of the key pair associated with the endpoint computing device; and

responsive to successfully verifying the payload received from the endpoint computing device, to instruct the endpoint computing device to remove the temporary wireless credential provisioned in the endpoint computing device.

15 . The computer program product of claim 14 wherein the obtained data structure comprises an ownership voucher associated with the endpoint computing device, the ownership voucher comprising first key information associated with the control plane, second key information associated with an operator of the first computing site and third key information associated with a vendor of the endpoint computing device.

16 . The computer program product of claim 15 wherein the control plane comprises a first cryptographic certificate associated with the control plane, a second cryptographic certificate associated with the operator of the first computing site, and a third cryptographic certificate associated with the vendor of the endpoint computing device, the control plane being configured to utilize the first, second and third cryptographic certificate to verify the first, second and third key information in the ownership voucher, wherein provisioning the temporary wireless credential in the wireless network device at the first computing site is responsive to a successful verification by the control plane of the first, second and third key information in the ownership voucher.

17 . A method performed by at least one processing device comprising a processor coupled to a memory, the at least one processing device implementing a control plane configured for onboarding of an endpoint computing device that is to be deployed at a first computing site, the method comprising:

obtaining a data structure, the obtained data structure comprising information utilizable for generating a temporary wireless credential for the endpoint computing device that is to be deployed at the first computing site, the temporary wireless credential being provisioned in the endpoint computing device at a second computing site different than the first computing site;

generating, based at least in part on the obtained data structure, the temporary wireless credential for the endpoint computing device;

provisioning the temporary wireless credential in a wireless network device at the first computing site;

verifying a wireless connection between the endpoint computing device and the wireless network device at the first computing site, the wireless connection utilizing the temporary wireless credential;

responsive to successfully verifying the wireless connection of the endpoint computing device to the wireless network device at the first computing site utilizing the temporary wireless credential, provisioning an updated wireless credential in the endpoint computing device and the wireless network device, the updated wireless credential being specified by an operator of the first computing site;

receiving, from the endpoint computing device, a payload comprising the updated wireless credential signed using a private key of a key pair associated with the endpoint computing device;

verifying the payload received from the endpoint computing device utilizing a public key of the key pair associated with the endpoint computing device; and

responsive to successfully verifying the payload received from the endpoint computing device, instructing the endpoint computing device to remove the temporary wireless credential provisioned in the endpoint computing device.

18 . The method of claim 17 wherein the obtained data structure comprises an ownership voucher associated with the endpoint computing device, the ownership voucher comprising first key information associated with the control plane, second key information associated with an operator of the first computing site and third key information associated with a vendor of the endpoint computing device.

19 . The method of claim 18 wherein the control plane comprises a first cryptographic certificate associated with the control plane, a second cryptographic certificate associated with the operator of the first computing site, and a third cryptographic certificate associated with the vendor of the endpoint computing device, the control plane being configured to utilize the first, second and third cryptographic certificate to verify the first, second and third key information in the ownership voucher, wherein provisioning the temporary wireless credential in the wireless network device at the first computing site is responsive to a successful verification by the control plane of the first, second and third key information in the ownership voucher.

20 . The method of claim 17 wherein the control plane is configured for communication with the wireless network device at the first computing site via a rendezvous server external to the first computing site and the control plane.

Assignments (1)

Continuity (1)

References Cited (32)